Superior Vision Services, Inc.

The business associate (BA), Superior Vision Services, Inc., reported that an employee was the target of an email phishing scheme that affected the protected health information (PHI) of approximately 25,341 individuals. The PHI involved demographic information. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA provided security awareness training to its workforce, strengthened its threat detection and response solutions, and enhanced its access controls to better protect PHI. OCR provided technical assistance to the BA regarding the HIPAA Rules.